Download PDFMarkdown Version
ClaudeChatGPTPerplexityGeminiMicrosoft CopilotRaycastMeta AIGrokZ.aiQwenKimi
DeepSeekMistralCursorVS CodeWindsurfJetBrainsClineLovableVercel AI SDKLangChain

Use Cerbos with your AI.

Connect your account once and let the AI you already use work with it, without building another integration. Decouple authorization logic from your application. Evaluate permissions, generate query plans, and manage access control via AI.

Included with plan

Ask AI about this Connector

Developed, maintained, and hosted by Vinkius.

MCP VERIFIED · PRODUCTION READY · VINKIUS GUARANTEED

Waiting for input…

Works with modern AI clients that support MCP, including ChatGPT, Claude, Cursor, and more.

ChatGPTClaudeCursorPerplexityGeminiMicrosoft CopilotRaycastMeta AI

Complete set · 6 capabilities

The complete Cerbos capability set.

These are the exact actions your AI can choose when you ask it to work with Cerbos.

Capability set01 / 02

01-03

3 capabilities in this set.

Part of 6 available through Cerbos.

  1. 01

    Get server info

    Returns the version and build details of the Cerbos instance

  2. 02

    Authzen evaluations

    Supports execute_all, deny_on_first_deny, and permit_on_first_permit semantics. Batch evaluation of multiple access requests using AuthZEN

  3. 03

    Get authzen config

    Returns endpoint URLs for the AuthZEN APIs

Capability set02 / 02

04-06

3 capabilities in this set.

Part of 6 available through Cerbos.

  1. 04

    Authzen evaluation

    Single action evaluation using the AuthZEN entity model

  2. 05

    Check resources

    This is a read-only evaluation. Evaluates permissions for a principal on a set of resources

  3. 06

    Plan resources

    Produces a query plan for obtaining a list of resources a principal is allowed to access

Observed, not estimated

889ms average. Fast in production.

Cerbos is checked daily against the live service.

Daily averagePeak 1029ms
Aug 20Today
Fastest day
725ms
Slowest day
1029ms
14-day trend
Slowing+14%

Connect your client

One URL. Every client.

Activate the Connector, copy your link, and paste it into the client you already use. 6 capabilities arrive ready to run.

Preview access · not provider authentication

The vk_preview_* token belongs to Vinkius preview infrastructure. It lets Claude discover and display the capabilities of Cerbos, so you can see the experience inside your AI.

It does not authenticate your account with Cerbos. Actions requiring credentials or live account data may not run until you activate the Connector and authorize the service.

Cerbos Connector

You're all set. Choose your MCP client and follow the setup instructions.

Connector linkhttps://edge.vinkius.com/vk_preview_y0c5dNo7ENj8oh5gsdkYK0hZAMSRgY44sro1JyED/mcp

Claude Desktop

Follow the steps below to connect in seconds.

  1. 1In Claude Desktop, open Settings → Connectors.
  2. 2Click “Add custom connector” and paste the connector link above as the remote MCP server URL.
  3. 3Click Add and start a new chat — Cerbos capabilities are ready to use.
Configuration · claude_desktop_config.jsonCopy
{
  "mcpServers": {
    "cerbos-mcp": {
      "url": "https://edge.vinkius.com/vk_preview_y0c5dNo7ENj8oh5gsdkYK0hZAMSRgY44sro1JyED/mcp"
    }
  }
}
  • Claude
  • ChatGPT
  • Cursor
  • VS Code
  • Windsurf
  • Claude Code
  • JetBrains
  • Cline

Step-by-step instructions for each client are in the guide. How to connect

FAQ

Questions Cerbos owners ask.

  • 01

    Can I check if a specific user has permission to access a resource?

    Yes. Use the check_resources capability by providing the principal (user) details and the resource information. The agent will return an evaluation of allowed or denied actions.

  • 02

    How do I generate a filter for my database based on user permissions?

    Use the plan_resources capability. It produces a query plan (AST) that you can use to construct database queries, ensuring users only see records they are authorized to access.

  • 03

    Is it possible to verify the Cerbos server version via AI?

    Yes, the get_server_info capability retrieves the version, build date, and commit hash of your connected Cerbos instance.

Explore

More in Developer Tools

Suggestions